Security Advisory
CVE-2021-42561
8.8
HIGH
Vulnerability Description
An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allows attackers to use shell metacharacters (e.g., backticks "``" or dollar parenthesis "$()" ) in order to escape the current command and execute arbitrary shell commands.
Published Date
January 12, 2022
Official Source
NIST NVD Advisory